// https://syzkaller.appspot.com/bug?id=fe5a4d5a2482bd73064db5de5d28e024f1e2a387 // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include static long syz_open_dev(volatile long a0, volatile long a1, volatile long a2) { if (a0 == 0xc || a0 == 0xb) { char buf[128]; sprintf(buf, "/dev/%s/%d:%d", a0 == 0xc ? "char" : "block", (uint8_t)a1, (uint8_t)a2); return open(buf, O_RDWR, 0); } else { char buf[1024]; char* hash; strncpy(buf, (char*)a0, sizeof(buf) - 1); buf[sizeof(buf) - 1] = 0; while ((hash = strchr(buf, '#'))) { *hash = '0' + (char)(a1 % 10); a1 /= 10; } return open(buf, a2, 0); } } uint64_t r[3] = {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}; int main(void) { syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul); syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul); intptr_t res = 0; res = -1; res = syz_open_dev(0xc, 4, 0x15); if (res != -1) r[0] = res; res = -1; res = syz_open_dev(0xc, 4, 0x15); if (res != -1) r[1] = res; *(uint32_t*)0x200010c0 = 0xd; syscall(__NR_ioctl, r[1], 0x5423, 0x200010c0ul); syscall(__NR_ioctl, r[0], 0x540a, 0ul); res = -1; res = syz_open_dev(0xc, 4, 0x15); if (res != -1) r[2] = res; *(uint32_t*)0x20000000 = 8; memcpy( (void*)0x20000004, "\xf1\xf3\x53\xf0\xc8\x33\x09\x7c\x27\xa8\x92\xe9\xd3\x57\xcf\xf5\xf8\xdb" "\xe8\x96\x27\xfa\xc0\xc7\xba\xa3\xd2\x36\x7d\x65\x6b\xce\x7b\x20\x1f\x63" "\x55\x17\x26\xfa\xe4\x6c\x98\xbb\x9d\x10\x15\xf4\xf6\xc6\x30\xca\x5f\xe5" "\x59\x38\x17\x41\x08\x6c\xf0\x9a\x27\x69\x56\xcd\xc7\xe9\x4d\xad\xd9\x1d" "\x4f\xe3\xb0\x87\x0e\x56\xa7\xd3\x80\xb7\x2f\x9b\x38\x5d\xa9\x52\x7a\x97" "\x5e\xd1\x17\x98\x9b\x65\x66\x46\x8a\x95\xb4\xb5\xbe\xe9\x0b\x1d\xc6\xb8" "\x3f\x94\x88\xe2\x26\xe5\x7b\xe4\xeb\x01\x5b\x2d\x2c\x87\xb4\xa9\x48\x8e" "\x1f\x20\x5e\xab\x5b\x42\x42\x25\xcb\x6c\xb4\xa8\x9a\x4f\x64\x4f\xa5\xa1" "\x7a\x96\xb6\xf1\xb9\x89\xce\xe8\x96\xf3\x60\x37\xd0\x3e\x55\x33\xf6\x9d" "\xfd\x83\xcd\xa7\x0c\xe0\x29\x10\xfa\xf8\x77\x7c\x0a\x2b\x88\xdf\x10\xf0" "\x38\x5e\x1b\xc8\x28\xff\x01\x9e\xb5\xa4\x50\xb1\xe0\x5c\x73\x80\x79\x97" "\x2d\xfc\x58\x81\x01\x32\xa5\x98\x04\xb8\x23\x35\x51\x07\x21\x42\x32\xb1" "\x2e\xfc\x8b\x93\xd6\x9b\x77\x7e\xb1\xe6\xdb\x53\xd9\xf0\x0a\x72\xd4\x63" "\x4e\xdf\x1a\x51\x4f\xe9\x84\x0f\x22\xc9\xaf\x52\xa3\x27\x38\x44\x50\x7f" "\x46\x14\xbf\x29\x8a\x07\x2f\x1b\x02\x92\xc5\x46\x15\x96\xf7\xda\xaa\xb6" "\xe6\x0c\xe3\x5b\x40\xd8\x4f\x5a\xbf\x83\xb7\x10\x42\x0c\xfb\x93\x32\xc8" "\x0c\x92\x05\xba\xce\x3d\x3f\x81\xbf\xee\xc6\x1a\xe2\x53\x7d\xbb\x85\x4d" "\xa4\x13\x1e\x11\xa1\x2f\x29\x39\xc4\x6c\x11\x9f\xcb\x96\x95\xc4\x53\x38" "\x0c\x41\xf0\x8b\x77\xf4\xe3\xf5\x6f\x4c\xeb\x9f\x12\xd1\x2f\xf8\x52\x64" "\x20\x75\xad\x08\x2d\xbc\x7b\x6e\x0c\x42\x01\xb7\xf5\xb3\x58\x46\xe7\xba" "\xf3\xea\x59\x1d\xaa\x5e\x17\x5b\x45\xf2\xfc\x93\xdf\xba\x95\x83\x7f\x20" "\xdd\x70\x1f\x82\x98\x11\xf8\x2e\xf2\xf7\x14\x47\xdf\x03\x90\x04\x8f\xdd" "\xed\x6e\x05\x83\x8e\xdb\x9f\xad\x41\x58\x75\x13\x21\xd6\x45\x2a\x67\xb6" "\xf1\x1e\x87\xaa\xee\x34\xa5\x08\x2f\xe8\x6d\x2f\xe6\x7b\x5a\xb0\xba\x8b" "\x9a\x10\x23\x31\x6d\xee\x0d\xb5\x2a\xac\x7c\x5e\xae\xca\x00\xfc\xb7\xdf" "\x6d\x82\xb1\xee\x05\xe5\xf1\x77\x29\x54\x6e\x25\xfa\x68\x82\xf1\x67\x13" "\x7c\x76\x1b\xf4\x17\x96\x69\x85\x9e\x02\x78\x74\xd2\x0c\x75\x84\xd4\xd4" "\xdb\x23\xce\xbc\x32\x34\x4e\xa2\xd4\x30\x52\x15\xf0\xe1\x3f\xa3\xcd\xa4" "\x4c\x00\xf2\x00\xf1\xa9\x5b\xf5\x12\x88\x72\x2b\x8e\xe1\x53\x49\xfd\x12" "\x34\x5f\x70\xf8\x50\x2f\x54\xfb\x65\x9d\xa9\x56\x77\x67\x96\x97\xf3\x0e" "\xbe\x4b\x1e\x0f\xf1\x9b\x98\x73\xd6\xde\x90\x0a\x89\xf1\x18\x35\xaf\xe9" "\x0c\x42\xdf\x20\xb8\x0d\xd1\xcb\x17\x64\x48\x2d\x3c\x2b\xc5\x15\x1a\xbb" "\x6c\x60\x27\x67\x3f\x3d\x0e\x6f\x09\xa6\x70\x4c\x67\x54\xed\x50\x88\x6f" "\x87\x26\x32\x9b\x33\x1a\x40\x95\x5c\xac\xc1\x1c\x3d\xde\xf2\x02\x99\x63" "\x02\xce\x8c\xc9\x08\x96\xdc\x84\x8c\x70\x66\xe8\x2a\x98\xde\xf0\x74\x1f" "\x00\x8a\x8d\x2a\x68\xbe\x89\x79\xda\xf9\x7c\x64\x55\x52\xaa\x06\xb5\x7a" "\xef\x18\xdb\x7a\x81\x35\x76\x8f\xd8\x29\xf8\x52\xdc\x6e\x7f\xf6\x45\x99" "\x71\x7f\x77\x15\xd7\x5c\x50\x56\xc4\xec\x5b\x1b\x75\xc5\xf6\xd2\x5d\x53" "\x81\x0f\x8a\x72\xd5\xb7\x9a\x21\xef\x4e\x5a\xa9\x7f\xcc\x00\xfd\x13\x4e" "\x15\x20\xd2\x25\xa6\xd8\xe7\x2c\xd8\x19\xd3\xf0\x64\xbc\xf3\x36\xac\x26" "\xe1\x33\xc3\x59\x83\x0d\x1b\x32\x6c\xa6\x20\x71\xe3\x8d\x46\x59\x13\xde" "\x34\xa9\x39\x47\xe3\xd0\x9d\xb2\xe5\xce\xd5\x44\xa3\xf3\x0b\x89\xfd\x2e" "\x0e\xa3\xbc\x71\x17\x2f\xf3\x02\x73\xa3\xd5\xcb\xcd\x4f\x98\xbd\x88\x4b" "\x83\xf7\xb4\x47\xf9\x69\x7c\xfc\xd4\xe4\xd5\x23\x79\xaa\x8a\xaa\xa9\x7b" "\x48\xfe\xb0\xea\x03\xc1\xa9\x31\x8c\xc8\x7b\xde\x35\xd7\x53\xcf\xe9\x97" "\xca\x98\xa7\xc2\x03\x42\x44\x43\xa3\xb9\xb6\x09\x8f\xbf\x06\x15\x84\xee" "\xd1\x26\x68\xbe\x29\xbb\x74\x91\xfe\xdb\x3d\xeb\xc8\x97\x0c\x57\x7c\x14" "\xff\x9e\xcb\x8e\x2a\xd6\xb9\xe3\x64\x47\xb3\x59\x25\xb7\x61\x26\x7e\x78" "\x58\xb7\x8a\x89\xb9\xf8\xe2\x48\xb1\x38\x70\x07\x63\xa7\x29\x21\x3a\x32" "\xda\xe8\xbd\xc2\x52\x43\xd9\x4a\xa3\xd7\x17\xbe\x39\x73\x7a\x30\x53\xad" "\x2e\xb4\xa0\xc0\x79\x53\x44\x4a\x12\x06\x35\x5f\x46\x20\x77\x74\x63\x4c" "\x35\xde\xb3\xb4\x84\xec\x1a\x4c\xcc\x0b\x53\x2b\x62\x05\x93\xcc\xfa\xf6" "\xea\x29\x8f\xe0\xcb\x62\xb4\xe9\x2d\x80\xcd\x24\x8f\xd9\xc1\x8d\x51\x8c" "\x29\xcb\x6a\xf3\x67\xd7\x09\x4e\x93\xd9\xe9\xab\x5c\x2a\xa9\x5a\x12\xce" "\xb8\x85\x92\x7c\xb0\x57\x39\xb0\x60\x84\x3e\x8b\x47\xa4\x54\xd4\x2a\xd8" "\xa0\x62\x11\xac\x37\xfc\x83\x0e\xdf\xe8\x11\xd4\x34\xb3\x8b\x76\x02\xaf" "\x5a\x05\xa6\xe2\xdc\x4c\x85\xc6\x62\x2b\x9d\xf9\xbd\xa2\x36\x3e\x8b\x2a" "\xa0\xfd\xaa\x4e\xb3\x2d\x2f\x70\xdc\xf0\x81\x06\xac\x96\x01\xad\xa3\x31" "\xa6\xa7\x33\x7d\xf9\x8c\xc3\x42\xa5\x2a\x99\x8f\x8f\x9b\xf3\x72\x53\x1f" "\x10\xfd\x29\x2c\x22\xf3\xdc\xf8\x55\x51\xcc\x6a\x66\x53\x1c\x69\x9a\x1f" "\x37\xd6\x4e\xb9\xc7\x78\x8e\x91\x2c\x5e\x7b\x39\x49\xd2\x91\xa5\x57\xba" "\xd3\x19\x9d\xb3\x35\xcc\x7f\x8a\xec\xbb\x97\xfe\x00\xd8\x0a\x12\x27\x3d" "\xba\xb8\xb7\x0c\x2c\x61\x59\xe8\xb8\x96\xaf\xb1\x56\xd2\x73\xbd\x55\x34" "\xe0\x30\x60\x78\xe0\xa4\x47\x2f\x52\x82\xb7\x1a\xbd\xd2\xa6\xb1\xc7\x4d" "\xcc\xdc\x34\xf2\x80\x53\xc0\x24\x01\x19\x94\x32\x3d\x24\x78\x45\x18\xe9" "\xed\xb5\x7f\x09\x60\x2c\xc1\xa1\xc0\x6d\x88\xb7\xb1\x71\xbb\x3f\x85\x24" "\x01\xeb\x41\x08\x9c\x54\x7b\xdb\x51\x95\xa0\xc7\xe7\x3a\x8c\x47\xd6\x50" "\xfd\x09\x41\xa7\xec\xc6\xe3\x51\xe5\xdd\x44\x99\xba\xa9\xa8\x1b\x4a\x28" "\x75\x7b\x24\x08\xbb\xdf\x12\x67\x62\x97\x78\xfc\x97\x72\x24\x36\x23\x26" "\xbf\x68\x20\x62\x8b\x47\xf6\xa0\x70\x15\x2b\xe1\xb9\xb4\x1b\x20\xce\x4d" "\x26\x06\x47\x20\x58\x57\x46\xa8\x7b\xfb\x24\xb7\x44\x61\x2a\xf8\x9f\xe6" "\x91\x77\x74\x51\xd8\x04\x35\x5d\x5b\x10\x38\x38\xe2\x38\x1a\xad\xf1\x91" "\xe7\x0b\xf6\xa0\xfa\xbe\x9c\xc8\x4e\x02\x95\x82\xc9\x68\x33\x84\xaf\xd4" "\x9e\x08\xed\x99\xde\xe0\xa3\xda\xbf\x87\x9c\x29\x38\xb4\xc2\xfc\x42\x13" "\xe3\x37\xac\x56\x56\x3d\x0a\x57\x9c\x15\x3f\x38\x21\x69\x1d\x4b\x21\xf2" "\xae\x3e\x13\x43\x60\x4c\xe8\xd6\x1b\x4b\x02\x43\x8e\x6e\x3b\xbc\x76\x66" "\x71\x25\x0a\x6c\xd6\x26\xff\xb9\xc3\x33\xd2\xe5\x24\x14\xfa\xd4\xbc\xdf" "\x36\xa0\xe8\x44\x63\x61\x88\x75\x60\x0a\xd3\xbc\x58\x59\xe2\xe2\x9b\xef" "\x9b\x8b\x0c\x34\x00\x49\x0f\xab\x3d\xee\xf2\x56\xc4\xfb\x5d\x60\x8c\x5c" "\xba\x57\x0c\xd2\xf2\xb8\xe1\x51\x79\x28\xe2\x2b\xd5\x08\xc4\x3c\xff\xb6" "\x30\xe0\x80\xfa\x0c\xfb\x1d\x5f\xcb\x8d\x2f\xea\x44\x41\x9a\x15\xb9\x6f" "\x99\xaa\xdb\x62\x12\xbf\x80\xf5\x0b\x05\x65\x0b\x8d\x82\x10\x99\x73\xfd" "\x4e\x39\xf8\x27\x2a\x7b\xda\xc7\xaf\xa0\x13\x38\x20\x1e\xe4\x5d\x80\xc0" "\xda\x84\x9c\xf0\xab\x77\xb5\xea\x93\xb3\x27\xdb\xeb\xbc\x46\xaa\x79\x5a" "\x96\x6a\x47\x37\xdc\x84\xaf\xc1\x26\xaa\x54\xf5\x01\x46\x2e\x86\xc0\x6f" "\x4b\x30\x52\xba\xd3\x41\x17\x43\x80\xd6\x89\x47\x5e\xe1\x79\x0f\xf1\x62" "\x23\x9b\x42\x75\x67\xdd\xf7\xeb\xac\x9c\x62\x03\x4d\x2b\x82\x85\xfb\xf0" "\x7b\xe4\xe0\x4c\x57\xe8\x46\x23\x61\xd0\x4e\x07\x5b\xe4\xe3\xdc\xe9\x85" "\xff\x8c\x2c\x25\x26\x85\xf8\xaf\xe9\x5f\x3d\x8b\x49\x61\xfa\xf8\xc6\x21" "\xc3\x1f\xbd\x2a\x8a\xf0\x95\xce\x9f\xc4\x9a\x3e\xc8\x4c\xf9\x98\xa7\xb8" "\x10\x69\xb0\x3c\x1e\xef\x1f\x14\xa6\x76\xa3\x40\x39\xbc\xef\xea\xa6\xd6" "\x4d\x16\x8b\x72\x82\xbc\x00\x67\x67\x65\x78\x8d\x58\x91\xf4\x61\x7f\x22" "\xdb\xcb\x81\xd4\xf2\xfd\x7b\xe7\xb4\x2a\xe3\xb9\x81\x85\x05\xd5\x77\xe7" "\xf0\xdc\xd8\x9f\x66\x9d\x2c\x15\xd7\x0e\x29\x2c\x13\xb5\x25\xd8\x1b\xee" "\xe6\xb6\x87\x0c\x3c\x8a\x72\xf7\xd1\xe3\xb6\x44\x72\xbb\xf9\x08\x7f\x41" "\x1d\x9b\x18\xf8\x0c\xd4\x28\x72\xf2\xca\xea\xa3\xfc\x4e\xc7\x77\x13\x57" "\x52\x41\x8b\x13\x68\x92\xf4\xb2\x60\x3a\x46\x3b\xed\xfb\xf1\x3d\xba\x2c" "\xa1\xbc\xaf\x41\xe7\x4e\x80\x78\x77\xee\xdf\x15\x55\x11\x64\xb0\x41\xe4" "\xdc\x9d\x30\x22\xe9\x9c\x2e\x2f\xac\x9d\x15\x90\x6a\xc6\xa7\xd6\x3b\xfb" "\x57\xd8\xcf\xee\x8d\xf6\x6a\x00\xab\xce\x56\xe1\x42\x4e\xcb\xda\x3b\x4a" "\x9d\xc5\xf3\x81\xbb\x7b\xa3\x8b\x57\x26\x87\x50\xa0\x80\x8d\x39\xc5\xcb" "\xf5\xce\xa7\xbc\x55\xec\x1e\x83\x28\x20\x60\x28\xc1\x6a\xbf\x2c\x3e\xea" "\xe7\x93\x59\x77\x7c\x53\x71\x8d\x0c\x6c\xe3\xc9\xf1\xb0\x93\xa3\xdb\x83" "\x4c\xfe\xb1\xe1\x46\xe1\x40\x46\x53\x45\xd6\xf0\xa7\x5d\xe4\xa1\xa8\xa3" "\x74\xc2\x46\x7a\x64\x1f\x55\x83\x90\x7c\x5f\x16\x39\xeb\x16\xcc\x81\x56" "\xf4\xb7\xe1\x48\x4b\xe9\x57\xcb\xe1\xb1\xfc\xb2\x6d\x44\x3b\xf7\x59\xb7" "\x38\xa8\x6c\xcf\xdf\xf4\xa6\x07\x6c\xd5\x05\x6f\x52\x12\x6b\x39\x35\xcf" "\x21\x07\xbe\x04\x03\x36\x96\xef\x40\x8f\xcb\xeb\xd7\x3a\x10\xbf\x8f\x5d" "\x72\x8d\x27\x29\xfd\x41\xbc\xb1\xbf\x1e\xc3\x15\x21\x6c\x8c\x5f\x9d\xfb" "\xf3\x66\xf1\x29\x45\xf6\x48\xf9\x01\xd9\x68\xf6\xee\x23\x1b\x98\xba\xb2" "\xcc\xb3\x13\x03\xc0\x2c\xf3\xe1\x90\x07\xa8\x92\xb3\x2e\x06\x5d\xd7\x3c" "\xd8\x1e\x2b\x0e\x99\xe5\xf6\x4b\x2d\xe4\x4e\xeb\x47\x7a\x3b\x37\x0b\x9c" "\x7a\xa8\x1e\xf7\x80\xaa\x9f\x48\xda\xdd\x32\xce\xfa\xb2\x07\x0d\xf2\xb5" "\x2a\x6a\xc7\x07\x73\x38\xe7\x26\x9c\xe5\x60\x8d\x1d\x10\x9d\x66\xe3\x07" "\xa2\xc8\x2b\x41\x1c\x10\x89\xa3\xaf\xd9\x9a\x56\xaa\xb8\xf3\x01\xcf\xc0" "\xe5\x41\xaf\xa8\x99\xff\xfb\x6d\xef\xa1\xd9\x90\x1f\xae\x7b\x1b\x5a\x54" "\xe8\x65\xde\x2e\xef\xc5\xa0\xb2\x6d\xde\x5e\xac\xbc\x51\xd4\x39\x20\xa9" "\xc0\xf2\x12\xc2\x7e\x16\xbe\x26\xcc\xcb\x24\x77\xb3\x1a\xa5\x75\x60\x54" "\xc9\x85\xd8\x42\x00\xf7\x10\xcc\xa1\xb0\x91\x84\x98\x90\xc4\xe8\x74\x28" "\x21\x7e\x2c\xbc\x21\x1e\x1b\xd7\x01\xcf\x93\x81\xde\x83\xb1\x7b\x61\x7d" "\xaa\x79\x41\xa0\x54\x53\x4c\x99\x15\xd9\x51\xdc\x92\x78\x97\x4d\x90\x92" "\xe0\x9f\xdb\x99\x78\xba\xd7\x3a\xd9\x89\xe3\x56\x5b\x05\xfc\x7f\x37\x91" "\xbe\x2d\x7e\x0b\x67\xfb\x90\x4d\x98\x90\xe7\x06\xb1\x8e\x0b\x95\x65\x9b" "\xb0\x25\x2b\x11\x52\xc1\x68\xc5\x8e\xb5\x4a\x66\xd7\xd3\x7f\xd2\xa9\xaa" "\x4e\xbd\x10\x9a\xdc\x94\x6a\x7e\xb3\x37\xe3\xa7\xaf\xb5\x0c\x7a\x95\x9e" "\x55\xbb\x19\x33\x18\x8c\x90\x19\xbe\xe7\x43\x10\x2a\x84\x5d\x35\x03\xf9" "\x5b\x53\x24\x8c\x48\x0f\xc8\x1b\x6a\xfc\x21\xa5\xcc\x3f\xc8\x1f\x19\xa2" "\xd4\x38\xb1\x52\xb6\x48\x23\x94\x60\xc4\x20\xf5\xcb\x19\x85\x82\xbe\x43" "\x98\x65\xac\xfb\x4e\x7e\x4c\xe5\xf4\xa1\x2e\x1b\x26\x7d\x29\x36\x09\xa9" "\x3a\x0c\x79\x94\x93\x15\xe5\x19\x5f\x51\x1b\xc2\x31\xec\x97\x35\xcc\x5c" "\x94\xc4\x73\x46\x7c\xf6\xe3\x41\x71\x83\x92\xa9\xcd\x7a\x4d\xcf\xf0\x63" "\x69\xdb\xcc\x5f\x54\xbe\x43\x45\xd7\x05\x63\xae\xc3\x3a\x4a\xec\x74\xbd" "\xd6\x4f\xd8\x6d\x90\x27\x52\xe9\xdc\x65\xfd\x07\xc7\x7b\x50\x83\x09\x33" "\x6c\xca\x55\x74\x54\x2e\x23\x43\x46\xdb\xa7\xdd\xfa\x2e\x4a\x8c\x12\x80" "\x64\x18\xb3\x78\xa5\xb4\x0d\xc1\x9f\xa9\x10\xc6\x9a\x88\x50\x85\x40\x07" "\x67\x7f\x01\xd2\x99\xa2\xc9\x16\xbe\x0c\xc5\x54\xc3\x38\x6f\xeb\xf0\x13" "\xa1\x01\x20\xed\x0b\xbe\x63\x6a\x6b\x6a\xde\xb4\x0c\x30\x54\x0c\xe7\x42" "\x60\x78\xd7\x11\x73\x54\xfc\x0e\x59\x74\xee\x40\x34\x5c\xc8\xf7\x09\x70" "\xb4\xba\x1e\x40\xa1\x8b\x28\x8b\xac\x7e\x92\x0f\x0c\x3e\x1e\xc9\x1c\xca" "\xbc\x01\x76\x2f\x6e\x0d\x4c\x49\xd8\xa5\x76\x0c\xee\x1c\x50\x1b\x85\xec" "\x6e\x3c\xa5\xc1\x91\x1f\xa2\x6b\x9f\xfb\x52\xf3\xb6\x64\x17\xe8\x89\x61" "\x6b\x99\xe8\x9b\xe2\xef\x78\x1f\x49\xd8\xda\xfa\x59\x94\x33\xf3\x69\xc5" "\x61\xd5\x54\x94\x57\x74\x68\xd8\xb5\xb0\xf3\xfd\xc0\x13\x5c\xbd\x43\xca" "\x79\x06\x3d\x9a\x3e\x15\xf2\x3c\xa1\x67\x7e\xaf\x94\xfb\xcf\x3a\x81\xea" "\x62\xfc\x8b\xca\x14\x22\x27\x46\x44\xec\x77\x36\x8e\xf3\xe0\x5c\xfa\x31" "\x1a\xc3\xa8\xc1\xa8\xc1\x32\xc3\x70\x1f\x79\x7c\x1f\x0d\x51\xec\x72\xce" "\x7a\x8f\xab\x44\xb9\xff\x2e\x4e\x71\x4b\x52\xca\xba\x8d\x19\x8a\x42\xbd" "\x25\x5b\xe3\x72\x34\x39\xfa\xad\x37\xf0\x50\xc0\x6c\x9f\xcf\xf2\xbd\x6d" "\x93\x93\xd6\x1b\xa3\xef\xca\xfe\xe7\x16\x45\x15\x9b\x8c\x1f\xaa\xd7\x9d" "\x02\xa4\xd4\x53\xb9\x8d\x09\xc4\x62\x88\xdc\xfa\xfd\xf8\x2c\x79\xb6\x40" "\x4b\xe1\xb9\xd4\x5d\x5f\x7f\x56\xf3\x9d\x50\xde\xb5\x86\x47\xd5\xfa\xee" "\x01\xae\x3a\x6d\xcd\x44\x65\xbf\xd9\x08\xe0\xcb\xbf\xa7\x3a\xe5\x72\x55" "\x03\xf7\x0f\x02\x28\x68\x95\x0c\xe5\xc0\xf6\xcd\x9c\x10\xbf\x60\x19\x81" "\x16\x24\x47\xb5\x8a\xb2\xc2\x7f\x0e\xda\x06\x0e\xfc\x3c\x89\x4d\xdf\x73" "\x1d\x69\x64\xd1\xda\xc7\x0c\x00\x85\xe3\x97\x68\x37\x57\xab\xca\xb5\xc9" "\xd5\x5d\x27\x47\xc5\x88\x17\xec\x25\x9e\xea\xd6\x8c\x11\x21\x35\x70\x7e" "\xe4\x19\xae\x04\x2a\xd0\xa2\x94\x7e\x84\xb4\xae\x74\x8b\x1f\x85\xa5\x85" "\xb4\xd1\x8b\xef\x8a\x9e\xfa\x2e\x48\xe7\xaa\x5f\x5b\x42\xbb\xd1\xae\x38" "\x51\xad\x48\x2c\x3d\x20\x42\xee\xcb\xff\xb6\x37\x05\xd3\x6a\xae\x2e\xe7" "\xc7\x11\x04\x21\xe4\xce\xdb\x3e\xa6\x85\x7b\x47\xe5\xd2\x89\xb2\x80\x28" "\x6b\xc3\x4c\x85\xbf\xc9\x67\x75\x01\xfa\xe3\x89\xc1\x4e\xb4\xd1\x5f\x08" "\x39\xb4\x62\xda\x54\xcb\x3a\x85\x18\xb3\xd1\x30\x8e\xeb\x2f\x67\x89\x67" "\x09\x8e\xa2\x1a\x3d\x12\x8e\x5b\xb6\x23\xe3\x40\x9a\x8a\xcc\xe6\x34\x62" "\x08\xa3\x86\xf3\xe4\xf2\xdd\xd4\xdc\x62\x34\xb3\x73\xd9\xda\x0f\xd3\x9c" "\xa0\xba\xdf\x74\x27\x67\xfc\x87\x08\x56\x93\x52\xeb\x46\xd5\xca\x58\x80" "\x37\xfa\x85\x22\xe6\x1c\x83\x20\x9a\xc9\x43\x68\x5b\x26\x2d\x8e\xf3\xd7" "\xfd\x4d\xd7\xdd\x14\x37\x74\x94\xc0\xb5\x42\xe2\x3c\x4c\x95\x15\x1c\x8e" "\x13\x95\x98\x4a\xd2\xb6\xdf\x23\x97\xe0\x98\xf8\x41\x5b\xe6\x50\x88\x65" "\x14\x26\xab\xb5\xcd\x58\x7c\x25\x3a\x13\x05\x4e\xe1\x6e\x8d\xfd\x0f\x23" "\xf0\xa8\x89\xdb\x75\x29\x26\x9e\x00\x7c\xec\x75\xf7\x38\x6a\x58\x44\xb7" "\x89\x18\x33\x41\xc7\x05\xfc\xd2\xb9\x6c\xf8\x0c\xe1\x4a\x4f\x64\x22\x94" "\x8a\x6c\x8d\x3d\x8e\x9d\x45\x5e\x2d\x6b\x8b\x87\xf4\x69\x69\x93\xcb\xc0" "\x10\xce\x10\x61\x4f\x1d\xff\x96\xdc\x18\xf8\x65\xb2\x66\x60\xd2\x72\x29" "\xde\xfa\x82\x29\x53\xbf\x39\x2c\x3d\x92\x0a\x50\xeb\x24\x73\xaa\x94\xfb" "\xce\xd1\x52\x66\x0d\x57\x15\x9b\x33\xf2\x27\x2f\xe6\xe7\xe1\xce\x6e\x6b" "\xa1\xf9\x48\xb5\x9c\x27\x7f\x18\x5d\x9a\x68\x6a\xc0\x44\x5e\x15\xe2\x0b" "\x46\xc8\xe0\xea\x46\x56\xd7\x15\xdf\x96\x42\x5b\x7d\x4b\x36\xcb\x85\x6e" "\x7c\x7b\xa3\xaa\xf6\x20\xc9\xd1\x0d\x5d\x96\x37\x0e\x46\x3d\x25\x55\xe0" "\x08\x5b\xa9\x4d\x8f\xfd\x29\x73\xe6\xbe\x31\xd7\x93\x4e\x77\x1b\x9b\x82" "\xd0\x06\x60\x11\xda\x58\xf1\x47\x74\x4e\x74\x7a\x24\x0d\xe1\x97\x8a\x8e" "\xca\x86\xcf\xa8\x45\xd8\xec\xa0\xaa\x9c\xab\xdc\x86\x68\xc4\x3f\x98\x62" "\xc7\xee\x85\x35\x3d\x28\x9d\x81\xd7\x44\x87\x7e\x22\xd6\x76\x13\x67\x39" "\x05\xe7\x8c\xfa\xac\xde\x5f\x6e\x43\xff\xcd\x6e\x7d\x9b\x9d\x15\xae\xa0" "\xdd\x92\x29\x77\xae\x87\xb0\xcb\x51\xa8\x9e\xf1\x53\x50\x30\x9b\x43\xeb" "\x5c\x8e\x79\xe4\x46\xd9\xba\x2b\xb0\x6d\x74\xfa\x6a\xed\x24\x31\xa5\x37" "\x9d\xa9\x77\x62\x21\x13\x0c\x87\xac\x36\xb7\x2b\xc1\xfc\x03\xf1\x4c\x78" "\xcd\xb8\xa1\x6f\x2d\x84\x0b\x2b\xad\x04\xbf\x46\x55\xa2\xab\x3c\x1e\xf4" "\x45\x8e\x40\x1f\xa8\x17\x70\x4b\x5a\x88\xe4\xbb\x8b\x15\xcf\x16\x38\x3b" "\x9a\x7e\x2a\x64\xde\x19\x92\x8b\x16\xe5\xf7\xf2\x5b\xe0\xad\x12\x6c\x38" "\x33\xac\xe7\xf3\x6f\x3c\x3d\x9a\x68\x36\xd1\xa4\x71\x0b\x49\x95\xec\x0c" "\x9f\x10\x00\x1f\x7d\xfc\x6b\x10\xb2\x9e\x9d\x03\x1f\x1d\x3b\x4b\x34\xe9" "\xb4\xdc\x3a\x8f\xb0\x8b\x49\xa2\x98\x92\xe6\x8d\xce\x93\x09\xc6\x78\x74" "\xec\xc7\x5d\x47\x7b\x59\xe2\xfb\xf4\x34\x7f\x3c\x44\x5e\x49\x12\x68\x22" "\xf4\x30\x1e\xae\xe1\x25\x94\x75\xcf\xb2\x25\x66\xe6\x9d\x9a\xe0\xd4\x36" "\xe4\x02\xf8\xd1\x00\x43\x9a\x9c\xa6\xa5\x18\xd4\x57\xa9\x10\x87\xe8\x36" "\x63\xc4\x13\xe3\x39\xa0\xd8\xd4\xc3\x1c\x08\x33\x03\xb4\x6b\x29\x82\x01" "\x52\x27\xbd\x7e\x12\x69\x76\xd7\xb2\x6a\x67\x0b\xa7\x8f\x21\xa8\xc9\x5b" "\x05\x45\x0e\xe1\x49\xc0\xae\x1f\xb7\x39\x7d\x7d\xab\x28\xf5\xe9\xbd\xc9" "\x9a\xcd\x85\x96\xa9\x28\xd6\xeb\xd9\x73\x16\xb8\xc6\x0c\xf6\x57\xbc\x4c" "\xa1\xff\xe8\xb9\xa4\x45\x72\x48\x42\xcb\x38\x68\x1a\xcc\x5d\x5e\xba\x45" "\x5d\x5f\xa1\x9c\xc8\xc5\xca\xc1\x5a\x46\xd6\xa7\x2c\x9b\x64\x98\x3a\x68" "\x6e\xdf\xf2\x7b\x36\x69\xd4\x6c\x00\x58\x79\x94\x9b\x19\x80\xa1\x45\x6e" "\x8a\x85\xfe\x49\x69\xac\xd5\x64\x15\xf1\x44\x40\x5e\xd9\x9a\xfb\x16\xd9" "\xd6\x52\xfc\xe3\x5b\x9c\x80\x0b\x8e\x21\x75\x17\x69\x0b\xed\x18\xe0\x00" "\x51\x8b\xaf\xfe\x8a\xcb\x5b\x10\xff\x49\xd7\x33\x31\x6b\xcc\x7b\x8b\xa7" "\x72\x65\xcd\xa3\x7e\x5f\xae\xd1\x30\x7f\x8a\x69\x33\x80\x90\xf5\x32\xf4" "\x63\xf1\xa9\x74\x0b\xbc\xc5\x88\x51\xbc\x5c\x85\xb1\xa1\x29\x59\x68\x98" "\x66\x7e\x55\xa6\x88\x2f\x4d\x0d\x97\xc4\x56\x69\x7d\xbe\x28\x23\x45\xde" "\xc8\x0d\x76\x44\x3e\x1e\xc7\x60\x2f\x52\x36\x07\x53\x4f\x42\x9d\x60\x3b" "\xc0\x87\xf9\xb1\x89\xb1\x5e\x9c\x38\x94\x56\xdd\xc0\x4b\x42\x5a\x55\x3f" "\xb7\xec\x0f\xa0\x48\x8b\x85\xaf\xa7\x5f\x62\x4a\x4c\xd2\x5f\x84\x54\xb6" "\x20\xb0\xb4\xfd\x08\x4a\x6f\x67\x50\xdc\xb0\xa6\xf3\xce\xeb\x03\x3f\xb9" "\xd8\x0f\x25\x3a\x53\xbc\x4e\x1d\xfc\x7f\x03\xb5\x00\x0c\xf1\xfa\x9c\x5f" "\x0e\xcb\xab\x32\x57\x14\x60\x30\xf7\x7f\x30\xb1\x60\xb7\x62\x62\xb8\xd3" "\xde\x25\x10\xe0\x98\x4b\x81\x92\xca\xa7\x85\x6a\x69\xb9\x3f\x5f\x53\xdb" "\x81\x90\xbb\x70\xc7\xda\xa2\xb0\x52\xc5\x6d\x38\xa6\x44\xeb\x2c\x69\xd3" "\x16\xd5\x05\x84\x8d\x92\x58\xc8\x93\x4b\x1b\x87\x08\x44\xe5\x43\xb7\x71" "\xf4\x96\x9e\x25\xc8\xe9\xa5\xf8\x25\xb9\xaa\xee\xac\x6f\xf1\xcc\x4e\x95" "\x65\x04\xfd\x07\xf8\x34\x80\x04\x13\xe2\x2d\xa2\x2d\xfd\xc4\xa0\xc2\x18" "\xda\xdd\x04\x42\xd3\x05\xcb\x43\x6d\xca\x3d\x83\x54\x02\xe0\x36\x2b\x12" "\xd0\x2e\x52\xae\x84\xc2\xe8\x0c\x9f\xcd\x7a\x47\xef\xd6\xc4\xbc\x65\x4c" "\x81\x48\xc4\x7a\x2a\xe5\x0f\x89\xe7\x29\x67\x6b\x4e\xe7\x9c\x96\x99\x1c" "\xb4\x48\x46\x79\xeb\x8e\xda\x35\x17\x40\x7d\xd4\x02\xf0\xd1\xb4\x8f\xcc" "\x95\x51\x27\x5d\xf9\x82\xe3\x4e\x1e\xe7\xdd\x2b\xb6\x46\xb9\xf2\xed\x45" "\xbc\x7e\x77\x0c\xbc\xe3\x65\x66\xec\xed\x4d\xc3\xdd\xf8\x66\x52\x32\xd0" "\x29\xe9\x48\x7d\x64\x84\x8c\x10\xe8\xcd\x2b\x01\x41\x5d\x3e\x80\x51\x9c" "\xc9\xb2\xff\x32\x18\xd6\xf2\x39\x69\x1e\x48\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 4096); *(uint16_t*)0x20001004 = 0x100b; syscall(__NR_write, r[2], 0x20000000ul, 0x1006ul); syscall(__NR_ioctl, r[2], 0x540a, 1ul); return 0; }